[SECURITY] [DSA 3585-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3585-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 22, 2016 https://www.debian.org/security/faq -...

DEBIAN-CVE-2016-4080

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

CVE-2016-4080

The CVE-2016-4080 issue is in Wireshark’s PKTC dissector (epan/dissectors/packet-pktc.c). The timestamp fields are misparsed, enabling a crafted packet to trigger an out-of-bounds read and crash (DoS). Affected are Wireshark 1.12.x (before 1.12.11) and 2.0.x (before 2.0.3). The entry provides no ...